Privacy policy

• Your name and email address. Email is the login identity — there are no passwords anywhere; you sign in with a one-time code sent to that address, or with Google, LinkedIn or LINE.
• Whether you use the site as a renter, an owner, or both, and which of the two you last switched to.
• A profile photo, if you upload one. ⚠️ Profile photos are stored in our PUBLIC media bucket by design — treat yours as public.
• Your country, and whether you chose it or we guessed it from the network headers our host adds to your request; and your preferred language, if you set one.
• The homes you save, and — if it ever happens — the fact that an administrator suspended your account and the reason recorded.

Why: to run your account, show you the right side of the product, and contact you about your own bookings and leases. Basis: performance of our contract with you, and our legitimate interest in operating a usable service.

• If you are an owner: your PromptPay ID, bank name, account name and account number, and an uploaded bank QR image. You can save several and reuse them across your properties.
• Whether the account name matches the name on your identity documents.

Why: so a tenant can pay you directly. Money does not pass through us — see the terms. Your payment details are shown to the tenant of a home once you have accepted their booking, and to nobody else; the bank QR image is served only to you and to that tenant.

If you choose to verify your identity, or to prove you own a home you are listing, you upload documents. We record which slot each file filled (document front, document back, selfie, or ownership document), its type and size, the decision, who decided it, and any note or rejection reason. Where a reviewer reads an owner name off a title deed, that name is recorded.

When a reviewer approves an identity check, they also record which kind of document it was and its number — your Thai ID or passport number. A Thai lease has to name both people by their document, so this is the number that fills in your contracts and that the signing record states we checked. You can see it on any contract you are preparing. If it is wrong, or you would rather be named by a different document, start the check again from your account: that erases the number we hold and you upload the new document.

Why: so the other side of a lease is dealing with a real, accountable person. Basis: our legitimate interest in preventing fraud on a platform where strangers hand each other keys and money, and — for the documents themselves — your act of choosing to upload them.

• The listing itself — the public description, photos, videos and 360° panoramas, which are stored in the PUBLIC media bucket and served from our media domain.
• The home’s full legal address, kept out of every public page and used only in the lease and in the owner’s own screens.
• Coordinates, worked out on our server by following the Google Maps link you paste, and cached on the listing.
• Private move-in instructions you write — wifi, electricity and water. These are released to a tenant automatically once the lease is signed and sealed, and to nobody else.
• Your private notes about a property, which are only ever shown to you; your to-do list for it; and the brief you write for the AI assistant, which is deliberately marked as shareable with tenants and is read out to them by the assistant.
• If you request our paid photo and video service: your name, email, the contact detail you type, and your note.
• If you paste a description in through the “Already wrote this somewhere else?” door: the statement you agreed to (that the text and photos are yours to use), in which language, when, and the IP address and browser it was agreed from. This stays on the listing record and is never public. Contact details, links and other-site booking lines are masked out of the pasted text before it is saved, and you are shown what was removed.

⚠️ Photos are re-encoded when they are saved, which strips EXIF metadata including GPS. Videos are not re-encoded, so any metadata inside a video file you upload is published with it.

• Who requested which home, for which dates and term, and the amounts involved.
• Your introduction message to the owner. Phone numbers, emails and messaging handles are masked out of it before it is stored — we never keep what you originally typed.
• If a booking is cancelled: who cancelled, when, and the reason given. Reasons are masked the same way.
• Viewings you book: your name, email, any note, whether you attended, and any cancellation reason.
• Near the end of a tenancy, your one-word answer about renewing. It is written once and never changed.

Basis: performance of the contract you are entering, and our legitimate interest in preventing double-bookings.

A signed lease is legal evidence, and it is treated as evidence. For each signature we store:

• Your legal name as it appears in the lease.
• Your Thai national ID number or passport number — these are quoted in the body of the lease itself, exactly as a paper lease would.
• The time you signed, and the times the one-time code was issued and verified.
• Your IP address and your browser’s user-agent string, captured at the moment of signing.
• Either the signature you drew, stored as an image, or the name you typed.
• The exact consent wording you were shown, and the language you were shown it in.
• A snapshot of both parties’ legal details and the property’s legal address, frozen when the first signature lands.
• Any comments either side wrote while negotiating, with the author’s name and email.

The finished PDF is sealed, fingerprinted, stored privately and emailed to both parties. It is served only to the two of you, and the route refuses to serve it at all if the fingerprint no longer matches.

Basis: performance of the lease contract, and compliance with Thai legal record-keeping — including the ten-year period in which a claim can be brought.

The move-in condition record holds room-by-room notes, photographs of the property’s condition, opening meter readings, and a confirmation from each side carrying the confirming party’s legal name, IP address, user-agent, and the consent wording and language shown. The sealed PDF is fingerprinted like the lease. Photos live in the private bucket.

• The bank transfer slip you upload, as an image, stored privately and shown only to you and your owner.
• What our AI read off it: the amount, the date text, the receiving name, the last digits of the receiving account, and the transaction reference.
• Which months an owner has confirmed as received, and how each was confirmed.

A month is only ever marked paid on evidence — a confirmation, or a matching slip. A past month with no evidence is shown as unrecorded, never as paid.

Chat runs between one tenant and one owner about one home. We store the message body after masking — phone numbers, email addresses and messaging handles are removed on the way in and the original is never stored — plus who sent it, whether the AI assistant wrote it, and per-side flags for read, present, archived, pinned and deleted.

Attachments are stored privately under a random name; we keep the original filename, type and size. Every image attachment is re-encoded when it is saved, which strips EXIF and GPS data.

Scores and a written quote from each side, with the author’s and subject’s email addresses. Reviews cannot be edited by their author. An administrator can hide a review; there is no hard delete.

• Assistant questions and answers: the question is recorded after contact masking, with the answer, the outcome, the model used and where it was asked.
• Search: your search sentence is recorded together with the filters we parsed out of it — with phone numbers, emails and messaging handles masked out BEFORE it is stored, the same rule your messages follow.
• Photo scan: the owner’s email, how many photos were scanned, and the labels suggested. No image is stored.
• Lease review: which contract, which owner, and every suggestion with whether it was accepted or rejected. Rejected suggestions are kept on purpose.
• Translation: a cache of owner-written text and its translation.

These logs also serve as our rate limits, which is why they are written before anything is answered.

Our host sees every request to the site, including your IP address, and supplies the country hint we store on your account. Loading a listing photo makes your browser talk to our media host; opening the map makes it talk to OpenFreeMap. A profile photo from a Google, LinkedIn or LINE sign-in is copied into our own storage once, the first time you sign in, and served by us from then on — your browser does not fetch it from Google, LinkedIn or LINE. Section 4 lists what each of those sees. While you are signed in, a page you have open tells us once a minute that you are still there, so we can see how much the site is really used; what is stored is a total of minutes per day, never what you were looking at.

• An owner deciding your booking request sees a conduct-based profile: whether you are ID-verified, how long you have had an account, how many leases you have signed, and anonymised quotes from previous owners. They do not see your address history or which homes those reviews came from.
• A tenant whose booking you have accepted sees your payment details for that home.
• Reviewers on our team see, for anyone: email, name, roles, join date, suspension status and reason, verification status, and whether a payout account name matched.
• Your first name and an initial appear on reviews you write.

• Change your name, profile photo, country, language and whether you rent or list, on your account page.
• Update or replace the payment details you publish.
• Unpublish a listing, which takes it off the market.
• Hide a conversation from your own inbox — noting that this does not delete the messages.
• Remove individual photos from a move-in condition record, and delete a property task.
• Download a copy of your data, from your account page — one file, assembled on the spot, with other people’s contact details left out.
• Delete your account, from your account page. It runs 7 days after you ask (you can undo it in that week), and only once you have no live tenancy, booking or contract in progress. What the law makes us keep is described below.

Write to privacy@xinxinhomes.com from the email address on your account. We will ask you to confirm it is you before we act.

Some things we will refuse to delete, and you should know which before you ask. A signed lease, its signature evidence and its move-in condition record are the proof that protects both sides of a tenancy, and Thai law allows claims on them for years — we keep those for the retention period in section 6 even if you close your account. Chat messages are a shared record between two people, and we will not erase one side of a conversation the other party is relying on. Reviews can be hidden but not rewritten.

If we get this wrong, please tell us first — but you do not have to. You can complain directly to the Office of the Personal Data Protection Committee (PDPC), Ministry of Digital Economy and Society, Bangkok.